GitHub Advisoryadvisory · crates.io

GHSA-jjx5-3f36-6927 Incorrect buffer size calculation in iced-x86

CRITICAL Published 2021-08-25 Modified 2021-08-18 Official page ↗

Aliases: CVE-2021-38188
Ecosystem: crates.io
Packages: iced-x86
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-131
Reviewed: 2021-08-18

Affected packages

• crates.io iced-x86: < 1.11.0 → fixed in 1.11.0

Description

An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely.

Related

Alias · CVE (1)

CVE-2021-38188 An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. vulnerability

Weakness · CWE (1)

CWE-131 Incorrect Calculation of Buffer Size weakness

References